Privacy policy

1. Who we are

Mess360 provides an online service for managing mess meals, expenses, deposits and monthly settlements. This policy explains how we handle personal information when you use the website and the application.

2. Information we collect

• Account details: your name, email address, optional phone number and your password (stored only as a secure hash).
• Mess data that you or your mess administrator enter: member names, contact details, meals, schedules, requests, expenses, deposits and monthly statements.
• Payment references for packages: payment method, transaction ID and the sending phone number. We never receive your bKash, Nagad, Rocket or bank PIN or password.
• Technical information: IP address, browser type and activity logs used for security and troubleshooting.
• Messages you send us through the contact form.

3. How we use information

• To provide the service: calculate meal rates, balances and reports for your mess.
• To verify package payments and activate subscriptions.
• To keep accounts secure, prevent abuse and investigate problems.
• To answer your questions and send important notices about your account.

4. Who can see your data

Mess data is visible only to members of that mess, according to their role: mess administrators and meal managers can see the whole mess, members can see their own records and the shared mess figures. Our system administrators can access data only when needed to verify payments, provide support or keep the service secure. We do not sell your personal information.

5. Sharing with others

We share information only with service providers that help us run the service (such as hosting and email delivery) under confidentiality obligations, or when required by law.

6. How long we keep data

We keep your data while your account or mess is active. Financial records such as expenses, deposits and closed monthly statements are kept so that past settlements stay correct. When you delete your account, your login and contact details are deleted straight away; your name stays on the meals, bazar, bills and deposits already recorded in a mess, without contact details, until that mess is deleted.

7. Security

Passwords are hashed, access is limited by role, every important change is recorded in an audit log and financial records are cancelled rather than deleted. No online service is perfectly secure, so please use a strong password and keep it private.

8. Cookies and browser storage

We store your sign-in session, selected mess and preferred language in your browser so the application works. We do not use advertising or third-party tracking cookies.

9. Your choices and rights

• See and correct your profile in Settings, or ask your mess administrator to correct mess records.
• Delete your account yourself at any time in the app or in Settings (see mess360.com/delete-account), or ask us for a copy of your data.
• Leave a mess at any time by asking its administrator to deactivate your membership.

10. Children

The service is not intended for children under 13. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy. We will change the date at the top and, for significant changes, notify account holders.

12. Contact us

Questions about privacy? Write to support or use the contact page.